1765 matches found
Caldera OpenLinux 2.2 Debian 2.12.2 RedHat 6.0 - Vixie Cron MAILTO Sendmail
Caldera OpenLinux 2.2 Debian 2.12.2 RedHat 6.0 - Vixie Cron MAILTO Sendmail Caldera OpenLinux 2.2 ,Debian Linux 2.1/2.2,RedHat Linux = 6.0 Vixie Cron MAILTO Sendmail Vulnerability source: https://www.securityfocus.com/bid/611/info Failure by the vixie cron daemon from validating the contents of a...
Caldera OpenLinux 2.2 / Debian 2.1/2.2 / RedHat 6.0 - Vixie Cron MAILTO Sendmail
Caldera OpenLinux 2.2 ,Debian Linux 2.1/2.2,RedHat Linux = 6.0 Vixie Cron MAILTO Sendmail Vulnerability source: https://www.securityfocus.com/bid/611/info Failure by the vixie cron daemon from validating the contents of a user supplied environment variable allow a malicious users to pass arbitrar...
Sendmail Redirection Relaying Allowed
The remote sendmail server accepts messages addressed to recipients of the form 'user@[email protected]'. A remote attacker could leverage this to reach mail servers behind a firewall or to avoid detection by routing mail through the affected host. C Tenable Network Security, Inc...
Sendmail mail from/rcpt to Pipe Arbitrary Command Execution
The remote SMTP server did not complain when issued the command : MAIL FROM: root@thishost RCPT TO: |testing This probably means that it is possible to send mail directly to programs, which is a serious threat, since this allows anyone to execute arbitrary commands on this host. This security hol...
Sendmail DEBUG/WIZ Remote Command Execution
Your MTA accepts the DEBUG or WIZ command. It may be an old version of Sendmail. This command is dangerous as it allows remote users to execute arbitrary commands as root without the need to log in. C Tenable Network Security, Inc. MA 2004-12-29: I merge sendmailwiz.nasl into this one...
Multiple MTA HELO Command Remote Overflow
The remote SMTP server seems to allow remote users to send mail anonymously by providing arguments that are too long to the HELO command more than 1024 chars. This problem may allow malicious users to send unsolicited mail i.e., SPAM or threatening mail using the server, and keep their anonymity....
sendmail-x.x.x-DoS.txt
Date: Sun, 6 Sep 1998 00:53:24 +0200 From: Michal Zalewski To: [email protected] Subject: Sendmail, lynx, Netscape, sshd, Linux kernel twice // greetings to kotka : // ...and everyone who could stand this post Hello boys and girls - probably everyone yearn after me : So I decided to publish so...
poc.mail.local.txt
Proof of Concept - Security Advisory 02/15/99 http://poc.csoft.net Released by [email protected] [email protected] --- Affected Program mail.local Berkeley Sendmail Description Local mailer forward mail to mailboxes Severity Mailbox compromise Synopsis: mail.local is a small program distributed wit...
sun.sendmail.security.txt
Date: Mon, 7 Jun 1999 13:56:23 -0700 From: Sun Security Coordination Team To: [email protected] Subject: Sun Security Bulletin 00187 -----BEGIN PGP SIGNED MESSAGE----- Sun Microsystems, Inc. Security Bulletin Bulletin Number: 00187 Date: June 7, 1999 Cross-Ref: Title: Version 8.8.8 Sendmail f...
hp.sendmail.8.8.6.DoS.txt
Date: Mon, 26 Apr 1999 14:46:41 -0700 PDT From: CIAC Mail User To: [email protected] Subject: CIAC Bulletin J-040: HP-UX Security Vulnerability in sendmail For Public Release -----BEGIN PGP SIGNED MESSAGE----- The U.S. Department of Energy Computer Incident Advisory Capability / | /\...
sendmail-8.8.x-8.9.x.txt
Date: Sat, 12 Dec 1998 02:22:10 +0100 From: Michal Zalewski To: [email protected] Subject: Sendmail 8.8.x/8.9.x bugware Bottoms up! Two bugs and fixes - Sendmail 8.8.x/8.9.x. 1. Redirection attack Due to strange address parsing policy briefly: if address ends with local hostname, trim it and...
mail87.sh
/bin/sh Hi ! This is exploit for sendmail smtpd bug ver. 8.7-8.8.2 for FreeBSD, Linux and may be other platforms. This shell script does a root shell in /tmp directory. If you have any problems with it, drop me a letter. Have fun ! ----------------------...
sendmail.8.9.1.DoS.txt
Date: Thu, 1 Apr 1999 14:00:16 +0000 From: Lukasz Luzar To: [email protected] Subject: Possible local DoS in sendmail Hi, It seems that sendmail ran with -t option does NOT block SIGINT ... In that moment while we are sending data to its stdin, when we will press CTRL-C process is being killed...
sendmail.8.9.1-2.txt
Date: Thu, 24 Sep 1998 10:14:06 -0400 From: Simon Smith This is not the same attack as the last one regarding the "". This one does not make your system hang but rather alters permissions is seems. If this was already posted please disregard it...
Linux Kernel 2.0 Sendmail - Denial of Service
Linux Kernel 2.0 Sendmail - Denial of Service / source: https://www.securityfocus.com/bid/363/info The 2.0.x kernels have a quirk in the TCP implementation that have to do with the accept call returning after only a syn has been recieved as opposed to the three way handshake having been completed...
Linux Kernel 2.0 Sendmail - Denial of Service
/ source: https://www.securityfocus.com/bid/363/info The 2.0.x kernels have a quirk in the TCP implementation that have to do with the accept call returning after only a syn has been recieved as opposed to the three way handshake having been completed. Sendmail, which is compiled on many unices,...
CVE-1999-0684
Denial of service in Sendmail 8.8.6 in HPUX...
PT-1999-1270 · Sendmail · Sendmail
Name of the Vulnerable Software and Affected Versions: Sendmail version 8.8.6 Description: The issue is related to a denial of service in Sendmail. Recommendations: For Sendmail version 8.8.6, update to a newer version that contains a fix for this issue...